Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Bridge Opt1 with LAN - FireWall Rules

    Firewalling
    4
    5
    2261
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Seth last edited by

      I'm bridging Opt1 with the LAN.  Do I need to duplicate the firewall rules on LAN on Opt1 to facilitate the same level of access or is there a clever solution out there?

      Thanks in advance
      –Seth

      1 Reply Last reply Reply Quote 0
      • S
        Seth last edited by

        Any guidance?

        1 Reply Last reply Reply Quote 0
        • Cry Havok
          Cry Havok last edited by

          AFAIK you'll need to duplicate the rules.

          1 Reply Last reply Reply Quote 0
          • I
            iamthed last edited by

            @Seth:

            I'm bridging Opt1 with the LAN.  Do I need to duplicate the firewall rules on LAN on Opt1 to facilitate the same level of access or is there a clever solution out there?

            Thanks in advance
            –Seth

            i don't think u need a duplicate rules.. let me try.. my topology like this
            we have a similar condition because i'm using bridge to..
            router –--> Pfsense ----> switch ------> client
            my router have 5 interface (LAN,wi-fi,voip,smartcard,ISP)
            PF sense have 4 interface(LAN and bridgeLAN + WAN and Bridgewifi)
            i'm deploy the rules that LAN cannot connect wi-fi
            so i'm put the rules on LAN to keep the QoS in a good way..
            and u don't need to put the same rules on ur wi-fi interface.. to block the same rules.. because it's already block..

            i'm dumb.. but i have a desire to learn

            1 Reply Last reply Reply Quote 0
            • GruensFroeschli
              GruensFroeschli last edited by

              iamthed: Seths question reformulated is:
              If i have LAN and OPT1. Then bridge OPT1 with LAN.
              Do i need to duplicate the rules on the LAN on the OPT1 interface to have on the OPT1 interface the same outbound (to the internet) behaviour than on the LAN interface.
              This has nothing to do with QoS… This is not about allowing onedirection traffic.

              The answer is: Yes you need the same rules on the OPT1 interface as on the LAN.
              I think with clever alias usage the number of rules in place can be minimized and thus lower the administration effort.

              We do what we must, because we can.

              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

              1 Reply Last reply Reply Quote 0
              • First post
                Last post